Vulnerabilityhigh
Weaponized Powerpoint in the Wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-4114 | Remote Code Execution in Microsoft Windows OLE via Crafted Files | — | 82% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 46.165.222.6 | of the IP address Indicators of Compromise: 95.143.193.131 46.165.222.6 78.46.40.239 144.76.119.48 37.220.34.56 46.4.28.218 95.143. |
| ipv4 | 5.61.38.31 | 0.239 144.76.119.48 37.220.34.56 46.4.28.218 95.143.193.182 5.61.38.31 94.185.80.66 95.211.122.36 The malicious Powerpoint documen |
| ipv4 | 78.46.40.239 | dress Indicators of Compromise: 95.143.193.131 46.165.222.6 78.46.40.239 144.76.119.48 37.220.34.56 46.4.28.218 95.143.193.182 5.61. |
| ipv4 | 94.185.80.66 | 6.119.48 37.220.34.56 46.4.28.218 95.143.193.182 5.61.38.31 94.185.80.66 95.211.122.36 The malicious Powerpoint document has a SHA25 |
| ipv4 | 95.143.193.131 | Here is a list of the IP address Indicators of Compromise: 95.143.193.131 46.165.222.6 78.46.40.239 144.76.119.48 37.220.34.56 46.4.2 |
| ipv4 | 95.143.193.182 | 5.222.6 78.46.40.239 144.76.119.48 37.220.34.56 46.4.28.218 95.143.193.182 5.61.38.31 94.185.80.66 95.211.122.36 The malicious Powerpo |
| ipv4 | 95.211.122.36 | 20.34.56 46.4.28.218 95.143.193.182 5.61.38.31 94.185.80.66 95.211.122.36 The malicious Powerpoint document has a SHA256 hash value o |
| sha256 | 70b8d220469c8071029795d32ea91829f683e3fbbaa8b978a31a0974daee8aaf | e malicious Powerpoint document has a SHA256 hash value of: 70B8D220469C8071029795D32EA91829F683E3FBBAA8B978A31A0974DAEE8AAF Advanced Malware Protection (AMP) customers are protected f |
From the original article
1 min read at blog.talosintelligence.com
On October 14th information related to a new Windows vulnerability, CVE-2014-4114 , was published. This new vulnerability affects all supported versions of Microsoft Windows. Windows XP, however, is not affected by this vulnerability.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.